Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136392e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: A1HPh+Ms7DZ13CS4kbVZyDO4ySRhjlAHhGxmP3ctIkI=
Subject key identifier: C9:BC:7B:2A:91:40:E6:5B:39:E2:0B:A7:6E:08:A5:39:79:35:78:84
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 69C91EC67840542D085A3685609202D03169B97F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136392e302f32342d3234203d3e20383334.roa
Signing time: Thu 09 May 2024 00:02:05 +0000
ROA not before: Wed 08 May 2024 23:57:05 +0000
ROA not after: Thu 08 May 2025 00:02:05 +0000
asID: 834
IP address blocks: 109.110.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 04:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c9:1e:c6:78:40:54:2d:08:5a:36:85:60:92:02:d0:31:69:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 8 23:57:05 2024 GMT
Not After : May 8 00:02:05 2025 GMT
Subject: CN=C9BC7B2A9140E65B39E20BA76E08A53979357884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:db:3b:1e:b8:5d:e5:25:b8:11:ec:68:3c:
bc:1c:30:fd:f9:d4:bb:2a:51:ed:ea:6a:cd:c5:9c:
6f:21:71:f6:7e:6d:ec:91:18:91:78:10:c5:d7:82:
e0:01:c4:ff:c6:5b:47:fe:1f:78:5d:99:60:0b:69:
b7:5f:35:16:9b:86:1b:93:95:76:fa:46:d9:24:7c:
da:22:9c:d2:f7:e3:90:c2:32:e9:6e:db:6c:71:6e:
a5:97:47:dd:49:73:25:22:5f:6f:ec:4e:8b:0d:12:
e7:97:b0:cd:59:98:4a:17:3a:fb:40:b5:d5:86:e2:
de:ce:f4:fe:8d:ca:50:65:15:1d:07:03:3e:c1:8c:
0c:0e:eb:9c:62:13:82:be:85:cb:f9:72:ff:3b:66:
d9:2c:bc:7b:06:96:f8:03:ca:c2:ae:74:4d:ff:bc:
7b:bb:62:29:7b:c7:ec:16:0f:7c:f7:87:51:c0:26:
f4:b9:23:99:5e:ed:e7:e8:8a:cf:0d:4d:aa:d8:2b:
a8:9b:15:43:1c:56:ea:1f:8a:02:f1:85:b8:54:f5:
96:2e:f9:39:0f:44:e0:1d:89:08:fc:30:43:9a:e2:
79:ff:17:57:d7:cd:6c:cc:cf:70:ac:dd:a6:0c:6a:
0a:d0:01:f1:71:9b:64:43:83:bb:52:7e:56:d7:98:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BC:7B:2A:91:40:E6:5B:39:E2:0B:A7:6E:08:A5:39:79:35:78:84
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ea:1d:27:cc:70:04:e0:71:45:f0:89:0e:27:98:be:8b:0c:
d2:c6:60:9f:5c:88:1c:ea:a5:bb:b8:20:28:0d:aa:db:24:79:
6f:3f:9a:e8:1b:8a:5d:c4:65:b2:8f:1e:17:f2:0f:e9:db:ab:
c6:c9:be:6c:fb:63:fa:ff:ce:a5:48:22:3f:88:53:76:31:b3:
b8:05:4f:4e:62:a8:9b:68:d5:8a:5d:54:d5:27:02:84:e7:56:
d3:6e:05:1d:2f:f2:51:85:34:aa:00:92:81:17:f3:31:9f:ff:
37:8d:4c:64:70:09:5c:56:91:4c:8e:b7:f0:3f:36:fc:9c:f4:
a5:9c:9b:32:0c:96:be:2a:ee:b2:bb:1c:c1:d4:67:1a:77:9e:
5e:7e:cc:d7:93:a1:27:59:97:6b:51:e1:a9:df:48:ed:0c:cc:
bc:2d:37:00:6b:64:d7:70:76:fc:fb:ec:40:fe:e0:36:ec:0c:
07:b7:a4:b2:7d:5d:f8:59:7b:11:f9:dd:e5:a7:4b:d3:93:f8:
b4:ad:e6:07:0e:d9:32:63:58:e7:52:5c:fe:b4:71:26:94:2f:
1c:24:19:c8:18:80:95:15:8b:36:b0:45:41:39:4b:ee:0c:0b:
1e:cf:e1:15:13:31:09:22:0c:5f:6c:68:19:5b:bd:21:3d:22:
ef:d3:2e:fa
-----BEGIN CERTIFICATE-----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Generated at Mon May 13 08:54:37 2024 by rpki-client on console-ams.rpki-client.org